Show HN: Sign in with your ChatGPT account for free AI
The open-source project at openai-oauth.vercel.app enables third-party AI applications to integrate OpenAI’s official OAuth 2.0 flow—allowing users to log in with their ChatGPT accounts—without handling API keys or model access; it is an independent, community-built identity bridge, not affiliated with OpenAI.
Project Scope and Technical Nature
openai-oauth.vercel.app is a Vercel-hosted open-source frontend OAuth middleware that implements the standard OpenAI OAuth 2.0 authorization code flow (using the https://auth0.openai.com/authorize endpoint), exposing /auth/login and /auth/callback routes. It allows external web applications to authenticate users via their official OpenAI (ChatGPT) accounts.
- It handles only ID token acquisition and basic validation—no API key exposure, no proxying of
/v1/chat/completions, and no access to user chat history or model permissions; - Requires developers to register an OAuth Application manually at https://platform.openai.com/settings/profile and configure valid
redirect_uri; - Requests only standard OpenID Connect scopes (
openid profile email)—no extended scopes likeoffline_accessor model-specific grants.
Compliance and Deployment Boundaries
The project explicitly states "not affiliated with OpenAI" and serves as a Hacker News–shared proof-of-concept. It suits early-stage AI demos or internal tools requiring lightweight SSO—but production use demands independent security review of token validation, HTTPS enforcement, and redirect URI sanitization.
- As of HN submission (ID 48922687), it received only 1 point and 1 comment, indicating minimal community traction and no enterprise-grade support;
- Provides no SDKs, CLI tools, or backend integrations (e.g., Express/FastAPI middleware), requiring manual callback logic implementation.